guys does anybody knows where Domain Controller stores passwords for Active Directory users?
I ask this question, b/c after firing ophcrack remotely against a win 2k domain controller, it yield all passwords in AD. I know AD information is stored in the %SystemRoot%\ntds\NTDS.DIT file, I wonder if that's where AD stores users password.

thanks in advance